- Joined
- May 15, 2017
- Messages
- 982
- Likes
- 760
- Points
- 1,045
![gitGraber_1.png](https://1.bp.blogspot.com/-DVTQu-6Js6o/XXMjzXOFZMI/AAAAAAAAQQg/bMRVIc0ISfsT-J7Cxb2oL8UXourwt0RUgCLcBGAs/s640/gitGraber_1.png)
gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
![gitGraber_4.png](https://1.bp.blogspot.com/-APgCGJzg4Ek/XXMkHZbxaaI/AAAAAAAAQQs/MQ3Y0KuLEbIx0TcbL-S16pbOPKRKvFnrACLcBGAs/s640/gitGraber_4.png)
How it work?
It's important to understand that gitGraber is not designed to check history of repositories, many tools can already doing this great. gitGraber was originally developed to monitor and to parse last indexed files on GitHub. If gitGraber find something interesting, you will receive a notification on your Slack channel. You can also use it to have results directly on the command line.
In our experience, we are convinced that leaks do not come only from the organizations themselves, but also from service providers and employees, who do not necessarily have a "profile" indicating that they work for a particular organization. .
Regex are supposed to be the more precise than possible. Sometimes, maybe you will have false-positive, feel free to contribute to improve recon and add new regex for pattern detection.
We prefer to reduce false positive instead to send notification for every "standard" API key which could found by gitGraber but irrelevant for hunter.
Download gitGraber